THE INVERSE GALOIS PROBLEM FOR PSL 2 (F p ) 



DAVID ZYWINA 



Abstract. We show that the simple group PSL2(F P ) occurs as the Galois group of an extension 
of the rationals for all primes p > 5. We obtain our Galois extensions by studying the Galois action 
on the second etale cohomology groups of a specific elliptic surface. 



1. Introduction 

1.1. Statement. The Inverse Galois Problem asks whether every finite group G occurs as the Galois 
group of an extension of Q, i.e., whether there is a finite Galois extension K/Q such that Gal(iv/Q) 
is isomorphic to G. This problem is still wide open; even in the case of finite non-abelian simple 
groups which we now restrict our attention to. Many special cases are known, including alternating 
groups and all but one of the sporadic simple groups. Various families of simple groups of Lie type 
are known to occur as Galois groups of an extension of Q, but usually with congruences imposed 
on the cardinality of the fields. See [MM99] for background and many examples. 

We shall study the simple groups PSL2(F p ) := SL2(F p )/{±/} where p > 5 is a prime; their 
simplicity was observed by Galois, cf. [Gal46, p. 411]. These are the "simplest" of the simple groups 
for which the inverse Galois problem has not been completely settled. 

Shih proved that the group PSL2(F p ) occur as the Galois group of an extension of Q if 2, 3 or 
7 is a quadratic non-residue modulo p, cf. [Shi74] (see §5.3 of [Ser08] for a lucid exposition). The 
case where 5 is a quadratic non-residue modulo p is then a consequence of a theorem of Malle 
[Mal93]. Clark [Cla07] showed that PSL2(F p ) occurs for a finite number of additional primes p (and 
also, assuming the Birch and Swinnerton-Dyer conjecture for elliptic curves over Q, primes p = 1 
(mod 4) for which 11 or 19 is a quadratic non-residue modulo p). Our main result is the following: 

Theorem 1.1. The simple group PSL2(F p ) occurs as the Galois group of an extension o/Q for all 
primes p > 5. 

Remark 1.2. (ii) The Inverse Galois Problem is easy for the (non-simple) groups PSL2(F2) and 
PSL2(F3); note that they are isomorphic to 63 and 2U, respectively. 

(i) In [Zywl2], we will show that the simple groups C^n+iCfO an d 0^ n {jp) both occur as the Galois 
group of an extension of Q for every prime p > 5 and integer n > 2 (with group notation as in 
[CCN + 85]). Moreover, these groups are shown to arise as the Galois group of a regular extension 
of the function field Q(i). This paper arose by trying to make progress in the excluded case n = 1 
where we have exceptional isomorphisms Os(p) — PSL2(F^) and Of(p) = PSL2(F P ) x PSL2(F P ). 

1.2. The representations. Let Pq be the projective line; it is obtained by completing the affine 
line Aq := SpecQ[t] with a rational point 00. Consider the Weierstrass equation 

(1.1) t(t - \){t + I) ■ y 2 = x(x + l)(x + t 2 ). 

The equation (1.1) defines a relative elliptic curve f:E^U where U := P^ - {0, 1,-1, 00}. More 
precisely, E is the projective subscheme of P^ defined by the affine equation (1.1) and / is obtained 
by composing the inclusion E C Pk with the structure map Pk — > U. The points on E off the affine 
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model (1.1) give our distinguished section of /. For any field K D Q and point s S U(K) C K, the 
fiber f~ 1 (s) is the elliptic curve over A" defined by specializing t by s in (1.1). 

Take any odd prime £. Let be the ^-torsion subscheme of E. The morphism E[£] — > U 
arising from / allows us to view E\l\ as a sheaf of F^-modules on U; it is free of rank 2. Define the 
F^-vector space 

V r .= Hl(U^E[i\) 

where we are taking etale cohomology with compact support. There is a natural action of the 
absolute Galois group GalQ := Gal(Q/Q) on Vg which we may express in terms of a representation 

p e : Gal Q ->■ Aut ¥e (V e ). 

Theorem 1.1 will be a consequence of the following. 

Theorem 1.3. For each prime £ > 11, the group PSL^F^) is a quotient of P£(G&1q). 

In §8, we shall describe the group p^(GalQ) for all £ > 11. Using the image of pg, we will 
use Serre's modularity theorem in §8.2 to show that our PSL^F^ )-extensions arise from modular 
representations. 

1.3. The elliptic surface. We can extend / : E — > U to a morphism /: X — > Pq such that X is 

a smooth projective surface defined over Q and / is relatively minimal (so if /': X' — > Pq was a 

morphism extending / with X' smooth and projective, then it would factor through /). The surface 
X is unique up to isomorphism. 

For each prime £, there is a natural Galois action on the etale cohomology group H? t (Xjj,Fi) 
which can be expressed in terms of a representation 

(j)£ : GalQ -»• Aut Ff (#f t (%, F/)) . 

For odd £, we shall see that a certain Tate twist of Vi is isomorphic to a composition factor of the 
F^ [GalQ] -module H? t (Xq, F^); this will allow us to prove the following. 

Theorem 1.4. The group PSL^F^) is a quotient o/^(Galnj) for all £ > 11. 

2. Basic properties and an overview 

Take any odd prime i and fix notation as in §1.2. We now describe many useful facts concerning 
the representation pi of §1.2; they are straightforward etale cohomology computations and we will 
supply proofs in Appendix A. 

2.1. Properties. 
Lemma 2.1. 

(i) The Fp-vector space Vg has dimension 4. 

(ii) There is a non- degenerate symmetric bilinear form ( , ) : Vit x Vg — > Fg such that 

(pi(a)v,pi(a)w) = (v,w) 

for all a G GalQ and v,w G Vg. 

Let 0(Vi) be the group of automorphisms of the vector space Vg which preserve the pairing ( , ) 
of Lemma 2.1(h). We thus have a representation 

p e : Gal Q -)■ OiVg). 

Let SO(Vf) be the kernel of the determinant map det: O(V^) — > {±1}- The image of pg actually 
lies in this smaller group. 

Lemma 2.2. We have pg{G&\ Q ) C SO(V^). 
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2.2. L-functions. Fix an odd prime p and let E p be the elliptic curve over ¥ p (t) denned by (1.1). 
Take any closed point x of U p := Pp — {0, 1, —1, oo} = SpecF p [i, l/(t(t — l)(t + 1))]. Let be the 
residue field of x and define degx := [F x : F p ]. Let E PtX be the elliptic curve over F x obtained by 
reducing E p . Let a x be the integer that satisfies |E Pi2: (F x )| = IF^I — a x + 1. The L-function of the 
elliptic curve E p is the power series 

(2.1) L{T,E p ) = JJ (1 - ax T dc z x +p dc z x T 2dcsx )- 1 G Z[T] 

where the product is over the closed points x of IA P (we do not need to include factors at 0, 1, — 1 
and oo since E p has additive reduction at these points). Define P p (T) := L(T/p, E p ). 

Lemma 2.3. For each odd prime p, P p {T) is a polynomial of degree 4 with coefficients in Z[l/p] 
that satisfies T 4 P p (l/T) = P p {T). 

We will need to know the polynomials P p (T) for a few small primes p. 

Lemma 2.4. We have P 3 (T) = 1 - 2/9 • T 2 + T 4 and P 5 (T) = (1 — 2/5 • T + T 2 ) 2 . 

For each integer n and odd prime p, define the polynomial P p (T) = Y\f = ±(l — otfT) G Q[T] 
where P p (T) = Y\i=i(^ — c^T) with a; L G Q. Using Lemma 2.4, it is easy to verify that 

(2.2) P 3 (2) (T) = (1-2/9 -T + T 2 ) 2 , 

P 3 (4) (T) = (1 + 158/81 -T + T 2 ) 2 and P 5 (4) (T) = (1 - 866/625 • T + T 2 ) 2 . 

2.3. Compatibility. Here, and throughout the paper, Frob p denotes an arithmetic Frobenius auto- 
morphism in GaiQ) corresponding to p. The following says that our representations pg are compatible 
and links them to the polynomials of §2.2. 

Lemma 2.5. For each prime p\ 21, the representation pi is unramified at p and we have 

det(/ - w (Frob p )T) = P P (T) (mod I). 

As a consequence of Lemma 2.5, we find that for each integer n and prime p \ 2£ we have 
det(I - p e {Fmb p ) n T) = Pj, n) {T) (mod £). 

2.4. Connection with the surface X. Let X be the surface of §1.3. We now related the F^[GalQ]- 
modules Vg and H^ t (X-Q,¥i). It will be convenient to work with the Tate twist H 2 t (X^, F^)(l) = 
H 2 t (X^¥ e (l)). 

Lemma 2.6. Suppose £>7. The semi-simplification of H 2 t (X^, F^(l)) as an F^fGal^] -submodule 
is isomorphic to Vi © F| . 

2.5. Brief overview. We now give some motivation for the rest of the paper; this will not be used 
later. Fix a prime £ > 11. In light of Lemma 2.5, our first approach in trying to compute the 
image of pi was to compute P p (T) for many p. The following proposition describes the pattern we 
observed; we will prove it in Propositions 4.7 and 5.6. 

Proposition 2.7. Let p be an odd prime. 

(i) Ifp = 1 (mod 4), then P p (T) = (1 + bT + T 2 ) 2 for a unique b G Z[l/p]. 
(ii) If p = 3 (mod 4), then P p {T) = 1 + (b 2 — 2)T 2 + T 4 for a unique non-negative b G Z[l/p]. 

That the shape of P p {T) seems to depend on the value of p modulo 4 suggests that we study the 
action of GalQ(j) on Vf, this is done in §3. Using the automorphisms of the surface Xqu*,, we will 
see that all the irreducible F£[GalQ(j)]-submodules of Vt have dimension 1 or 2. We will eventually 
show that Vi is isomorphic to Wffi W as an F^[Gal(Q(j)]-module where W is irreducible of dimension 
2. 
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Let O(Vg) be the commutator subgroup of 0(Vg); it is an index 2 subgroup of SO(Vi). We will 
show that pe(Galo) C Q(Vg). The group £l(Vg) contains —I and there is an exceptional isomorphism 
(p: n(V t )/{±I} ^ PSL 2 (F^) x PSL 2 (F^). We thus have a representation 

0<: Gal Q — I2(V<)— ^J2(Ve)/{±l}-^PSL2(F<) x PSL 2 (F £ ) PSL 2 (F,) 

where is one of the two projections. Making appropriate choices of </j and pr, for each prime 
p \ 2£ we will have 

tr(^(Frob p )) = ±b 

where b is the value from Proposition 2.7 modulo £. 

The main task of this paper is to show that fig : Galq> — > PSL 2 (F£) is surjective (this will be done 
in §7). The proof is based on Serre's open image theorem for non-CM elliptic curves over number 
fields, cf. [Ser72]. We assume that the image of fig is contained in one of the maximal subgroups 
of PSL 2 (F^) and then try to obtain a contradiction. To follow Serre's approach, we will need to 
understand the image under pj> of the inertia subgroup at £ and 2, see §4 and §6. 

One can similarly construct $7: ( ial;; — > PSL 2 (F7); however, it appears not to be surjective. We 
will thus impose the condition £ > 11 throughout much of the paper. 

3. Decomposition over Q(i) 

Fix a prime £ > 11. We now explain how Vg breaks up into irreducible representations under 
the Gal(Q(j)-action. Fix an irreducible F^fGaiQ^J-submodule W of Vg and set n := dimp f W. Let 
(3: GaWj) — > Autp^(VF) = GL n (F^) be the representation describing the Galois action on W. We 
denote by W y the dual space of W with its obvious GaWj)-action. 

Proposition 3.1. Fix notation as above and let V^ ss be the semi-simplification ofVg as an F^GaWj)]- 
module. 

(i) The integer n is either 1 or 2. 

(ii) Ifn = l, then V e ss ^W®W®W v ® W v and W ^ W v as ¥g[Gal m ]-modules. 
(111) 7/n = 2, then Vg ^ W W and W ^ W v as Fg [GalQ(j) ] -modules. 

The proposition will be proved by showing that the automorphisms of the surface Xqu-\ constrains 
the image of pg. 

Lemma 3.2. Let Q be the group of quaternions {±1, ±i, =bj, ±k}. There is a homomorphism 
(p: Q — )• Autf £ (V^) such that <p(Q) commutes with pg(G&lQu\) and — 1) = —I- 

Proof. By base extending, we may assume that the varieties U and E and the morphism / : E — > U 
are all defined over Q(i). Let a\ and a 2 be the automorphisms of E that are given by (x,y,t) 1— >■ 
(x,iy,—t) and (x,y,t) 1— > (t~ 2 x,it~ 1 y,t~ 1 ), respectively. For each i 6 {1,2}, there is a unique 
isomorphism gi : U — > U such that / o on = gi o f. Observe that the automorphisms on permutes 
the fibers of / : E —> U; moreover, the maps between fibers are isomorphisms of elliptic curves. We 
find that ai induces an automorphism of the group variety E[£] (though not as a sheaf over U). We 
thus have a commutative diagram 



E 


[£}—^E 


M 




f 










U *U. 



where the horizontal morphisms are isomorphisms. The morphisms on and thus gives rise to a 
linear automorphism ai of Vg = H^(Uq, E[£]). 
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Let A be the subgroup of automorphisms of E generated by a\ and 02- The action of the 
on Vg thus give rise to a homomorphism ip: A — > AutF^(V^) satisfying (f(oti) = a^ 1 . The group 
(p(A) commutes with pi(G&\q^) since the automorphisms Oij are defined over <Q(i). One can readily 
verify the relations a\ = a\ = 1, a 2 = a 2 , 7^ 1, and ol\ o 02 a^ 1 = , which is enough to ensure 
that A is isomorphic to the group Q : = {±1, ±i, ±j, ±k} of quaternions. 

Let l be the automorphism of E defined by (x,y,t) \— > (x,—y,t); it is equal to a\ and a 2 . We 
need to show that the induced automorphism I := (p{i) of Vg is —I. We have / o 1 = /, so 1 is an 
automorphism of the sheaf on £/. Moreover, 1 acts as —J on E[£]. Therefore, I acts as —I on 
V t . □ 

Proof of Proposition 3.1. Let Z be the F^-subalgebra of EndF £ (W) consisting of those endomor- 
phisms that commute with the action of GaWj). Since W is irreducible, Schur's lemma implies that 
Z is a finite division ring and is hence a (commutative) field. 

Suppose that W is stable under the action of the group Q from Lemma 3.2. Let (p: Q — >■ Autf £ (W) 
be the corresponding representation. Since <p( — l) = — / and every non-trivial normal subgroup of 
Q contains —1, we find that <p(Q) is isomorphic to Q. Therefore, <p(Q) is a non-abelian subgroup 
of Z x . However, this contradicts that Z is a field. 

Therefore, W is not stable under the action of Q. So there is an element 7 G ¥>(Q) such that 
j(W) ^ W. The vector space y(W) is stable under the action of GaWj) since <p(Q) commutes 
with /3^(Gal(Q)(j)). The automorphism 7 gives an isomorphism of F^[GalQ(j)]-modules from W to 
l(W). We have j(W) (~) W = since W is irreducible and j(W) / W\ Therefore, © 7(W0 is a 
submodule of V? with 7(W) isomorphic to W. Since has dimension 4, this proves that n is 1 or 
2. 

If n = 2, then V* = © 7(W) = © W. The F^[Gal Q (j)] -module W is isomorphic to its dual 
since Vg is isomorphic to its dual by Lemma 2.1(h). 

We now suppose that n = 1. There is a submodule of isomorphic to W © W. Since Vg is 
self-dual by Lemma 2.1(h), there is a submodule of V^ ss isomorphic to W^ v ffiiy v . To finish the proof 
of (ii), it suffices to show that W ^ W v . Assume to the contrary that W = W v . This implies that 
the corresponding character (3: GaWj) — > Autf e (W) = and its inverse are equal. Therefore, 
/3(GaWj)) C {±1}, and hence det(J + g) = or det(I — g) = for every g £ p^(GaWj)). 

The prime 5 splits in Q(i) and det(/ — pi(Froh^)T) = P§{T) (mod £), so i"5(l) or P^( — l) must 
be divisible by £. However, by Lemma 2.4 we have -Ps(l) = (8/5) 2 and Ps(l) = (12/5) 2 which are 
not divisible by £ > 11. □ 

4. Ramification at £ 

Throughout this section, we fix a prime £ > 11. 

4.1. Tame inertia. Let Qg be an algebraic closure of Q^. Let Q" n be the maximal unramified 
extension of in Q e . Let be the maximal tamely ramified extension of in Q e . The subgroup 
I := Gal(Q £ /Q£ n ) of Galjj, is the inertia group. The wild inertia group V := Gal(Q € /Q^) is the 
largest pro--^ subgroup of X. The tame inertia group is the quotient Xt := XjV . 

For each positive integer d relatively prime to £, let pd be the d-th. roots of unity in Q^. The 
map X — > o~ 1— > a(-\/i)/ \Tl is a surjective homomorphism which factors through Xt- Taking the 
inverse limit over all d relatively prime to £, we obtain an isomorphism Xt — > hm^ The group fi^ 
lies in the ring of integers of Q^. Composing the homomorphism Xt — > pa with reduction modulo 
the maximal ideal of gives a character Xt — > F^ . For a positive integer m, setting d := £ m — 1 
gives a surjective character e:Xt^f ¥f m . We obtain m characters Xt — > ¥f m by composing e with 
the isomorphisms of F^ m arising from field automorphisms of F^™; they are called the fundamental 
characters of level m. See §1 of [Ser72] for more details. 
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Let V be an irreducible F£[Z]-module and set m := dim^ V. The group V act trivially on V, 
cf. [Ser72, Proposition 4]. Let Z be the ring of endomomorphisms of V as an F^[Zt]-module. Since 
V is irreducible, Z is a division algebra of finite dimension over F^. Therefore, Z is a finite field 
and V is a vector space of dimension 1 over Z. Choose an isomorphism Z = F^m of fields. The 
action of If on V corresponds to a character a: It Z x = F^ m . Let E\, . . . ,e m : It —> F^ m be 
the fundamental characters of level m. There are unique integers ej £ {0, 1, ...,£— 1} such that 
a = • • • These integers ex, . . . ,e m are called the tame inertia weights of V. 

For an F^[X]-module V of finite dimension over F^, we define its tame inertia weights to be the 
integers that occur as the tame inertia weight of some composition factor of V. 

The following is a special case of a conjecture of Serre (cf. §1.13 of [Ser72]) and follows from a 
more general result of Caruso [Car08]. 

Theorem 4.1 (Caruso). Let X be a scheme that is proper and semistable over Zg. For i < i — 1, 
the tame inertia weights of H^Xq ,F^) V belong to the set {0, 1, . . . 

We will makes use of the following. 

Proposition 4.2. The tame inertia weights of H? t (X^,¥i) v belong to the set {0,1,2}. 

Proof. After a change of variable in (1.1), we may start with the Weierstrass equation 

y 2 =x 3 + (t 5 - t)x 2 + (t 8 - 2t 6 + i 4 )x; 

it has discriminant 16t 10 (t - l) 8 (t + l) 8 . Define C := W\ with a parameter t. The Weierstrass 
equation defines a closed subscheme y of P^. We have a morphism 3^ — > C obtained by composing 
the inclusion y C Fq with the structure map P^. — > C. One can check that the singular subscheme 
of 3^ is reduced and consists of the closure of the points (0, 0, 0), (0, 0, 1), (0, 0, —1) and a point with 
t = oo. By resolving the singularities appropriately (more explicitly, by following Tate's algorithm), 
we can construct a model X /Z^ of Xtq e that has good reduction. The proposition then follows 
immediately from Theorem 4.1 (we have 2 < t — 1 by our ongoing assumption £ > 11). □ 

4.2. Image of inertia. Let I be an inertia subgroup of Galqj at I and let V be the wild inertia 
subgroup of I. Since I is unramified in Q(i), the group I is contained in GaWj) . Let xe '■ GsIq — > F^ 
be the representation describing the Galois action on the group of £-th roots of unity fi£, i.e., 
o-(C) = C Xe{(7) for a £ Gal Q and ( € Hi- 

Let W be an irreducible F^[Gal(Q(j)]-submodule of Vg. Set n = dim^ W; it is 1 or 2 by Propo- 
sition 3.1 (i) . Let (3: GaiQm — > A\\tf e (W) = GL n (F^) be the representation describing the Galois 
action on W. The main task of this section is to prove the following proposition. 

Proposition 4.3. 

(i) If n = l, then (3\x = Xi\x f or some e £ {—1, 0, 1}. 

(ii) If 7i = 2, then /3(I) C SL 2 (F £ ). 

(Hi) The group pi(I) / pi(V) is cyclic of order 1, £ — 1 or £ + 1. 
Lemma 4.4. Ifn = 2, then det(/3(GaiQ)) C {±1}. 

Proof. By Proposition 3.1(iii), W is self-dual so deto/3 = (deto/3) -1 . The lemma is now immediate. 

□ 

Lemma 4.5. Let be the semi- simplification ofVg as an ¥g[I]-module. Let W be an irreducible 
F i[I]-submodule of VI s . Set m := dimp f W and let a: I — > AutF £ (W) — GL m (F^) be the represen- 
tation corresponding to W. 

(i) We have m < n. In particular, m is 1 or 2. 
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(ii) If m = 1, then a = x'ell f or some e £ { — 1, 0, 1}. 

(Hi) If m = 2, then a(I) is a cyclic group of order 1+1 contained in SL2(F^). 

Proof. We have X C GaiQ(j) since I is unramified in Q(i). Part (i) now follows immediately from 
Proposition 3.1. 

Let H be the semi-simplification of H? t (X-^, F^(l)) as an F^Xj-module. By Lemma 2.6, we find 
that W is isomorphic to a submodule of H. Therefore, W(— l) v is isomorphic to a submodule of 
H(— l) v - So W(— l) v is isomorphic to a submodule of the semi-simplification of H? t (X-Q, F^) v as 
an Fi [X]-module. Proposition 4.2 implies that the possible tame inertia weights of W(— l) v are 0, 
1 and 2. 

First suppose that m = 1. We then have (a-XfXj 1 )" 1 = £ e for some e £ {0, 1, 2} where e : X — >• F^ 
is the fundamental character of level 1. By Proposition 8 of [Ser72], we have e = Xt\x- Therefore, 
a = £~ e Xe\l = Xi\x where / := 1 — e £ { — 1, 0, 1}. This proves (ii). 

Now suppose that m = 2. The irreducible representation a corresponds to a character X — > F^ 2 
that we also denote by a. Let e be a fundamental character of level 2. Using Proposition 3.1, 
we find that W is self-dual. Therefore, W(l) is isomorphic to W(— l) v as an F^XJ-module, and 
hence has possible tame inertia weights 0, 1 and 2. So a = Xt\j^ ' e ei+te2 with e\,e2 £ {0,1,2}. 
The character e 1+£ is fundamental of level 1 and hence agrees with xt\li so a = e^ 1+ ^ 2e with 
fi:=l-ei€ {-1,0,1}. 

If /l + fit £ {0, i(£ + 1)}, then the character a is 1, or Xt. \l\ this is impossible since 

a: X — > GL2(F^) is irreducible. 

If /l + fit £ {il; i^} ; t nen a(X) is cyclic of order £ 2 — 1 since e(X) = F* 2 . We have n = 2 since 
m = 2. By Proposition 3.1, we deduce that a and f3\z are isomorphic representations (we again 
have X C GaiQ(j) since £ is unramified in Q(i)). Therefore, /3(GalQ(j)) contains a cyclic group C of 
order £ 2 - 1. By [Ser72, §2.6], C is a split Cartan subgroup of GL 2 (F £ ) and satisfies det(C) = Wf . 
So det(/3(Gal(Q(j))) = F^ which contradicts Lemma 4.4 since £ > 11. 

Therefore, f\ + fit £ {±(^ — 1)}- This implies that a(X) is cyclic of order £ + 1 and is contained 
in SL 2 (F^). □ 

Proof of Proposition 4-3. We have X C GaWj) since £ is unramified in Q(i). Let W be an irreducible 
F^XJ-submodule of W and take a and m as in Lemma 4.5. 

Suppose that n = 1 and hence W = W. Part (i) now follows directly from Lemma 4.5(h). By 
part (i) and Proposition 3.1(h), we deduce that the group pe(I) / pt(V) is cyclic of order 1 or I — 1. 

We are left to consider the case n = 2. First suppose that W = W, and hence we may assume 
that = a. By Lemma 4.5(iii), /3(X) = a(X) is a cyclic group of order I + 1 in SL2(F^). By 
Proposition 3.1(iii), pe(I) is isomorphic to /3(X) and hence is cyclic of order £+1. 

The final case is where n = 2 and dim^ W = 1 . Let W ss be the semi-simplification of W 
as an F^[X]-module. There is an F £ [X]-module W such that W ss ^ W W. Let 7: X F* 
and 7': X —7- F^ be the characters describing the action of X on W and W', respectively. By 

Lemma 4.5(h), there are e and / in { — 1, 0, 1} such that a = xf\x an d a' = Xe \l- So for a £ X, we 
have 

det(J - /%)T) = (1 - a(a)T)(l - a'(a)T) = 1 - (xi{<r) e + X^)~ f )T + Xi^T' f T 2 . 

If e 7^ /, then we find that det(/3(X)) is a cyclic group of cardinality at least (£ — l)/2 > 2. However 
this contradicts Lemma 4.4, so e = f. Therefore, det(I — /3(<r)T) = 1 — (xi{ a ) e + Xe( (7 )~ e )T + T 2 
for all a £ X. This proves that det(/3(X)) = {1}, i.e., /3(X) C SL 2 (F £ ). We have f3(l)/f3(V) ^ 
a(X) = x e (2-)) so Pity/PiV) is a cyclic group of order 1 or I — 1 if e = or e = ±1, respectively. 
By Proposition 3.1(h), we deduce that pi(I) / Pi(V) is also cyclic of order 1 or £ — 1. □ 

When n = 2 we have the following important constraint on the image of (3. 
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Lemma 4.6. Ifn = 2, then /3(Gal Q(i) ) C SL 2 (F £ ). 

Proof. By Lemma 4.4, we can define a character e: GaW^ — > {±1}, 0" h-> det(/3(o")). We need to 
show that e = 1. By Proposition 3.1 (hi), we have Vi = W ®W as F^GalQ^J-modules and hence 

(4.1) det(/ - p t {p)T) = det(/ - /3(ct)T) 2 = (1 - tr(/3(a))T + e(a)T 2 ) 2 

for a G GalQ(j). Since 5 splits in Q(i), Frob5 and Frob| belong to GaW^. By (4.1) and Lemma 2.4, 
we have: 

(1 - tr(/3(Frob 5 ))r + det(/3(Frob 5 ))T 2 ) 2 = P 5 (T) = (1 — 2/5 • T + T 2 ) 2 (mod £) 
(1 - tr(/3(Frob|))T + det(/3(Frob|))T 2 ) 2 = P 3 (2) (T) = (1 - 2/9 • T + T 2 ) 2 (mod £). 

From the unique factorization of F^[T], we deduce that e(Frob|) = 1 and ^(Frobs) = 1. 

We claim that the character e is unramified at all finite places v of Q(i) that do not lie over 2. 
Fix a finite place v of Q(i) that does not lie over 2. If v does not lie over I, then e is unramified at 
v since pi is unramified at primes p \ It. So suppose that v lies over I. Let X be an inertia subgroup 
of GaWj) at v. Since t is unramified in Q(i), the group X is also an inertia subgroup of GalQ at t. 
By Proposition 4.3(h), we have (3(1) C SL2(F^) and hence e(X) = 1. 

Now let K be the fixed field in <tf of ker(e). We have [K : Q(i)] < 2 and the extension K/Q(i) 
is unramified at all finite places not lying over 2. Since Z[i] is a PID, K can thus be obtained by 
adjoining to Q(i) the square root of a squarefree element a G Z[i] that is not divisibly by any prime 
of except 1 + i. So a is of the form ±i e (l + iy with e, / G {0, 1}. Therefore, .fT is the field 
obtained by adjoining to Q(«) the square-root of some a G {1, i, 1 + i, i(l + i)}. 

Let ps be the prime ideal of Z[i] generated by 2 + i. We have e(Frob P5 ) = ^(Frobs) = 1 and hence 
p5 splits in K. Therefore, a modulo p5 is a square. We have i = —2 (mod ps) and i(l + i) = 2 
(mod P5). Since 2 and —2 are not squares in Z[i]/p5 = F5, we deduce that a G {1, 1 + i}. 

Let p3 be the prime ideal of Z[i] generated by 3. We have e(Frob p3 ) = e(Frob|) = 1 and hence p3 
splits in K. Therefore, a modulo P3 is a square. One can check that the image of 1 + i modulo P3 
generates the group (Z[z]/p3) x which is a cyclic group of order 8; in particular, 1 + i is not a square 
modulo P3. Therefore, a = 1. So K = Q(i) and hence e = 1. □ 

4.3. L- functions with p = 1 (mod 4). In this section, we show that the polynomial P p (T) with 
p = 1 (mod 4) are of a special form; we will consider the primes p = 3 (mod 4) in §5.3. 

Proposition 4.7. For each prime p = 1 (mod 4), we have P p (T) = (1 + bT + T 2 ) 2 for a unique 
b€ Z[l/p]. 

In terms of our representations pi, we have the following: 

Lemma 4.8. For every a G GalQ(j), we have det(/ — pg(a)T) = (1 + 6T + T 2 ) 2 for a unique b G F^. 

Proof. Fix notation as in the beginning of §3 and take any a G GaW^. If n = 1, then Proposi- 
tion 3.1(h) implies that 

det(J - Ma)T) = (1 - /3(a)T) 2 (l - ^(a^T) 2 = (1 - (/3(a) + + T 2 ) 2 . 

This proves (i) in the case n = 1; the uniqueness follows from unique factorization. 

We now assume that n = 2. By Proposition 3.1 (hi), we have Vi = W®Was F£[Gal(Q(i)]-modules. 
Therefore, 

det(J - pi{a)T) = det(/ - P(a)T) 2 = (1 - tr(/3(a))T + T 2 ) 2 

where the last equality uses Lemma 4.6. □ 
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Proof of Propositions J..7. By Lemma 4.8, for each odd prime p and prime £ > 11 with t 7^ p, we 
have 

P p (T) = det(J - ^(Probp)T) = (1 + bT + T 2 ) 2 (mod £) 
for some 6 G Fg. Since P P (T) modulo £ is of the form (1 + 6T + T 2 ) 2 for all but finitely many primes 
£, we deduce that P p (T) is of the form (1 + bT + T 2 ) 2 for some 6 e Q. Therefore, L(T,E p ) = 
P p (pT) = (1 + bpT +p 2 T 2 ) 2 . Since L(T, E p ) has integer coefficients, unique factorization shows that 
b is unique and that bp G 1*. This completes the proof of Proposition 4.7. □ 

5. Orthogonal groups 

Throughout this section, we fix a prime £ > 11. 

5.1. The group n(Vfc). Let sp: 0(V e ) F X /(F X ) 2 be the spinor norm, cf. [Zas62]. If v G Vfc 
satisfies (i^u) 7^ 0, let r„ G 0(Vg) be the reflection across v (we have r^(v) = — v and r^(w) = w for 
all u; £ Vi such that (v,w) = 0). The spinor norm can be characterized by the property that it is 
the group homomorphism which satisfies sp(r t) ) = (v,v) • (F^) 2 for all v G Vf, for which (v,v) 7^ 0. 

We will use the following to compute spinor norms; it follows from equation (2.1) of [Zas62, §2] 
and uses that Vg has dimension 4. 

Lemma 5.1. If A £ 0(V e ) satisfies det(I + A)^0, then sp(A) = det(I + A) • (F x ) 2 . □ 

Let n(V e ) be the simultaneous kernel of det: 0(V e ) {±1} and sp: 0(V e ) F X /(F X ) 2 . We 
could also define £l(Vi) as the commutator subgroup of 0{Vi). We now show that the image of p£ 
lies in this smaller group. 

Lemma 5.2. We have —I G Q(Vg) and /^(GalQ) C Q(Vi). 

Proof. We have /5^(Gal(Q) C SO(Vg) by Lemma 2.2 and det(— /) = (— l) 4 = 1. It thus remains to 
show that sp(-I) = (F x ) 2 and that sp(pe(a)) = (F x ) 2 for all a G Gal Q . 

By Lemma 2.4, we have det(7- p^(Frob 3 )T) = P 3 (T) = 1-2/9 -T 2 + T 4 (mod £). Since det(/± 
p^(Frob3)) = P 3 (±l) = (4/3) 2 (mod £), Lemma 5.1 implies that sp(/^(Frob 3 )) and sp(— /5£(Frob 3 )) 
both equal (F^) 2 . Therefore, sp(— I) = sp(/^(Frob 3 )) • sp(— /^(Frob 3 )) = (F^) 2 . Since 3 is inert in 
Q(i) and sp(p^(Frob 3 )) = (F £ x ) 2 , it suffices to show that sp(pi(a)) = (¥f) 2 for all a G GalQ(j). 

Take any a G GalQ(j). By Lemma 4.8, we have det(I — pi(o~)T) = (1 + bT + T 2 ) 2 for a unique 
b G F^. If 6 7^ 2, then by Lemma 5.1 we have 

sp(Ma)) = det(J + Pi (a)) ■ (F x ) 2 = (2 - b) 2 ■ (¥f) 2 = (F x ) 2 . 

So suppose that 6 = 2, and hence det(7 - pt(a)T) = (1 + 2T + T 2 ) 2 = (1 + T) 4 . Since I is odd, there 
is an e > such that pi(a) £e = —I. Therefore, sp(pe(a)) = sp(pe(a)y e = sp(— /) = (F^) 2 . □ 
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5.2. The representation Define the 4-dimensional F^-vector space V e := F 2 ® F( Wj. We have 
a natural action of SI^F^) x SL^F^) on Ve with (— I, —J) acting trivially; we denote the image in 
Aut F ,(V*) by SL 2 (W e )®SL 2 (F e ). 

Lemma 5.3. There is an isomorphism Ve = Ve of vector spaces such that the induced isomorphism 
AutF^(V^) = AutF^(V^) of groups gives an isomorphism ijjf. f2(Vg) — > SL2(F^) <X> SL2(F^). 

Proof. Let {e, /} be the standard basis of the vector space W := F| over F^. Let h: W x W — > 
be the alternating bilinear pairing that satisfies h(e, f) = 1. The group of automorphisms of the 
vector space W that respect the pairing h is SL(W) = SL2(F^). Let b be the bilinear pairing on 
Ve = W ®f £ VV that satisfies b{v\ ® w\,V2 <8> 1^2) — h(vi,V2)h(wi,W2)- One can show that 6 is 
symmetric and non-degenerate. 

As before, we can define 0(Ve) to be the group of automorphisms of Ve that preserve the pairing 
b, and we define Jl(Vg) to be the simultaneous kernels of the determinant det: O(V^) —> {±1} and 
the spinor norm spy, : O(V^) — > F* /(F^) 2 . By [Zas62, (2.3)], spy (— I) agrees with the discriminant 
of the pairing b on Ve- One can then check that spy (— I) = (F*) 2 . 

Up to isomorphism, there are two 4-dimensional vector spaces over F^ equipped with a bilinear, 
symmetric and non-degenerate pairing. They can be distinguished by the spinor norm of —I (see 
[Ser73, IV §1.7] where it is stated in terms of quadratic forms; the discriminant of the correspond- 
ing quadratic form agrees with the spinor norm of —I). We have diniF f Ve = 4 = dim^ Ve and 
spy (— /) = (F^) 2 = sp(— I) where the last equality uses Lemma 5.2. There is thus an isomorphism 
(p : Ve — > Ve of F^-vector spaces such that (<p{v), <p(w)) = b(v, w) for all v, w G Ve- It now suffices to 
prove the lemma for Sl(Ve) instead of Q(Vi). 

Since sp v< (-I) = (F*) 2 , Q,(Vt) is isomorphic to the group denoted by ftj(f) in [CCN+85, §2]. 
There is an exceptional isomorphism Q£ (^)/{±/} = PSL2(F^) xPSL2(F£), so Q(Ve)/{±I} is isomor- 
phic to PSL 2 (F £ ) x PSL 2 (F f ). We have a natural action of SL 2 (¥ e ) x SL 2 (F^) on Ve with (-1, -I) 
acting trivially. This action respects the pairing b and gives rise to an injective homomorphism 

(5.1) £: SL 2 (F £ ) 0SL 2 (F^) = (SL 2 (F £ ) x SL 2 (F < ))/{±(7 > /)} Sl(V t ). 

Quotienting out by the subgroup generated by (I, —I), £, gives rise to an injective homomorphism 
£: PSL2(F^) x PSL2(F^) Q(Ve)/{±I} that must be an isomorphism by cardinality considerations. 
That £ is an isomorphism implies that £ is also an isomorphism. □ 

Let pe'- G&Iq — > SL2(F^) <£> SL2(F^) be the representation obtained by composing pe with the 
isomorphism ipe °f Lemma 5.3 (this of course uses Lemma 5.2). Let 

t : Gal Q ->• PSL 2 (Ff) 

be the homomorphism obtained by composing pe with the homomorphism SL2(F^) ® SL2(F^) — > 
PSL2(F^) which maps A <S> B to the image of A in PSL2(F^). Similarly, we define GalQ — >• 
PSL2(F^) except projecting on the second factor. 

Lemma 5.4. After possibly switching $£ and we may assume that the group i?^(GaWj)) has 
cardinality 1 or I. For a G GaiQ(j), we have tr($^(cr)) = ±b where det(J — pg(o~)T) = (1 + 6T + T 2 ) 2 . 

Proof Take any a G GaWj). Choose A,B € SL2(F^) such that ipe(P£(°~)) = Pe(°~) equals A® B. 
Take Ai,A2 G F^ such that the eigenvalues of A and i? are {A^A^ 1 } and {A2, Ag 1 }, respectively. 
The roots of det(I — pe(a)T) = det(I — pe(o~)T) in F^ are thus A1A2, A1A2 1 , A^ X A2 and Ajf 1 A^ 1 . 

We claim that the image of A or B in PSL2(F^) has order belonging to {1,1} . It suffices to prove 
that Ai = ±1 or A2 = dbl. Since det(I — pe(cr)T) is a square by Lemma 4.8, AiA^ equals A1A2, 
Af ^2 1 or A 1 ' 1 A 2 . If AiA^ 1 = AiA 2j then A 2 = ±1. If AiA^ 1 = Aj" 1 A 2 " x , then Ai = ±1. Finally, 
suppose that A1A2 1 equals A^ X A2 = (AiA^ 1 ) -1 and hence Ai = e\2 for some s G {±1}- The roots of 
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det(J — gT) are thus eA|, e, e and eA 2 2 ■ Since det(I — pe(a)T) is a square, we have eX 2 . = eX 2 2 and 
hence A 4 . = 1. So if A 2 / ±1, then \\ = -1 and hence det(I - gT) = (1 - T) 2 (l + T) 2 = (1 - T 2 ) 2 ; 
however, this is impossible by Lemma 4.8. This proves the claim. 

If the image of B in PSL^F^) has order 1 or £, then A2 equals some e G {±1} an d hence 
det(I - Pt {a)T) = (1 - eAiT) 2 (l - eX[ l T) 2 = (1 - e(Ai + X^)T + T 2 ) 2 = (1 - str(A)T + T 2 ) 2 . 

To complete the proof of the lemma, it remains to show, after possibly swapping i?£ and that 
^(GalQ^)) has cardinality 1 or I. If this is not true, then there are elements a\ and 0*2 of GaWj) 
such that 'd^aiY 7^ 1 and $a(a"2) 7^ 1. The order of 1^(01) and $1(0-2) are 1 or £ by our claim. 
After replacing o\ and a 2 by an ^-th power, we may assume that i(o<i) = 1 and ^(ci) = 1- So 
with o" := 0"i0"2 we have '&e(a) e 7^ 1 and #^(0"/ 7^ 1. This is a contradiction since ^(cr)^ = 1 or 
^(crY = 1 by our claim. □ 

From now on, we take GaiQ — > PSL2(F^) and GalQ — > PSI^F^) as in Lemma 5.4. 

Lemma 5.5. For a G GalQ — GalQ(j) 7 we have tr($i(a)) = ±6 for some b G which satisfies 
det(J - p t (a)T) = l + (b 2 - 2)T 2 + T 4 . 

Proof. Fix a G GalQ — GaWj). Choose A, B £ SL2(F^) such that ipi(pi(a)) = pe(a) equals A® B. 
The image of A and B in PSL2(F^) is 'de(a) and *&'g(cr), respectively. Take Ai,A2 G F^ such that 
the eigenvalues of ^4 and B are {Ai, Aj -1 } and {A2, A^ 1 }, respectively. The roots of det(J — pe(a)T) 
in F^ are thus A1A2, AiA^ 1 , Ajf 1 A2 and A^A^ 1 . 

By Lemma 5.4 and our choice of t?^, the coset of B 2 in PSL2(F^) has order 1 or £. Therefore, 
A| = 1- Since the group ^(GalQ(j)) has order 1 or £ by Lemma 5.4, we find that A 2 , up to a sign, 
does not depend on the initial choice of a G GalQ — Galjj^) . 

Suppose that A2 = ±1, and hence det(J — pi(a)T) equals det(I — AT) 2 or det(I + AT) 2 for each 
a G GalQ — GaWj). Since 3 is inert in Q(i), the polynomial Ps(T) = det(I — p^(Frob3)T) (mod £) 
must be a square. The discriminant of P$(T), by Lemma 2.4, is 2 16 5 2 /3 8 . Since t > 11, we find 
that -Ps(T) (mod £) is separable which contradicts that it is a square. 

Therefore, A2 is a primitive 4-th root of unity and hence 

det(J — (A® B)T) = (1 - AiA 2 T)(l - AiA 2 ^ 1 T)(l - A^A 2 T)(1 - X^X^T) 

= (1 - Ai(A 2 + A2 X )T + A 2 T 2 )(1 - A7 X (A 2 + X^)T + A7 2 T 2 ) 
= (1 + A 2 T 2 )(1 + A^ 2 T 2 ) 

= 1 + (A 2 + A7 2 )T 2 + T 4 = 1 + ((tr^) 2 - 2)T 2 + T 4 . 
The lemma is now immediate. □ 

5.3. L-functions with p = 3 (mod 4). We now show that the polynomial P p (T) with p = 3 
(mod 4) are of a special form; we considered the primes p = 1 (mod 4) in §4.3. 

Proposition 5.6. For each prime p = 3 (mod 4), we have P p (T) = 1 + [b 2 — 2)T 2 + T 4 for a unique 
non-negative b G TL\Vjp\. 

Proof Fix a prime p = 3 (mod 4). By Lemma 5.5, for each prime £ > 11 with l/pwe have 

P P (T) = det(/ - p^(Frobp)r) = 1 + (b 2 - 2)T 2 + T 4 (mod £) 

for some b G F^. Since P p (T) modulo £ is of the form 1 + (b 2 — 2)T 2 + T 4 modulo £ for all but finitely 
many primes £, we deduce that P p (T) is of the form 1 + (b 2 — 2)T 2 + T 4 for some b G Q. Therefore, 
L(T,E P ) = P p {pT) = 1 + (p 2 6 2 — 2p 2 )T 2 -j-p^T 4 . Since L(T,E p ) has integer coefficients, unique 
factorization shows that b 2 is uniquely determined and that bp G Z. Uniqueness for 6 is obtained 
by imposing the condition b > 0. □ 
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6. Ramification at 2 



Fix an inertia subgroup of Gal<Q at the prime 2. The goal of this section is to prove the 
following. 

Proposition 6.1. For any prime £ > 11 and g £ %2, Pi{9) 12 * s unipotent. 
Take any £ > 11. Let 

<p t : Gal Q -> Aut Q , (HI(Xq, Qt)) 

be the representation describing the Galois action on H^(Xq, Q^). Grothendieck proved that there 
is an open subgroup I' of Z2 such that <pe(g) is unipotent for all g 6 X'; see the appendix of [ST68]. 
Thus for each g £ I2, some positive power of <^(<?) is unipotent. For each g S I2, let m 5 be the 
smallest positive integer for which <pi(g) m9 is unipotent. 

Lemma 6.2. The integer m g does not depend on £. 

Proof. Take any g € I2. It suffices to show that <fie{g) 1S unipotent for one prime i if and only if it 
is unipotent for all I. Let d be the dimension of H? t (Xjj, Qp) over Qf, it does not depend on I. 

Define t g := ti{tp^{g)). Since some power of <pi(g) is unipotent, we find that the eigenvalues of 
<Pe(g) are roots of unity. Therefore, (pe(g) is unipotent if and only if t g = d. It thus suffices to show 
that t g is an integer that does not depend on I. This follows from Corollary 2.5 of [Och99] and uses 
that X is a smooth proper surface. □ 

Let 4>l be the Galois representation of §1.3. For a prime t and g £ I2, let n g ^ be the smallest 
positive integer for which (j)£(g) n9 ' e is unipotent. 

Lemma 6.3. Take any prime £ > 11 and g £ I2. 

(i) The integer n g n divides m g . 
(ii) If £\ m g , then m g = n g £. 

Proof. By Lemma A. 10, we can identify (pi with the representation Gal^ — > Autz f (A) describing 
the Galois action on A := H^X^Zi). Again by Lemma A. 10, the quotient A/£A is isomorphic to 
H? t (X-^,Fi) and the action of GalQ on the quotient gives rise to <f>i. Since (pn(g) ma is unipotent, 
we deduce that 4>e(g) m3 is unipotent. Therefore, n g ^ divides m g and m g /n g / is a power of I. This 
proves (i) and we have m g = n g ^ when £ \ m g . □ 

Proof of Proposition 6.1. Fix g £ I2. Take any prime £ > 11. By Lemma 2.6, n g ^ is also the 
smallest positive integer for which pi{(i) ng ^ is unipotent. By Lemma 6.3(i), it suffices to prove that 
m g divides 12. 

Now take any prime £ > 11 which does not divide m g . By Lemma 6.3 (ii) , m g is the smallest 
positive integer for which P£(g) mg is unipotent. 

The order of "&'Ag) divides 2. The order of any element of PSL2(F£), and in particular $i(g), 
divides £, {I — l)/2 or {I + l)/2. Therefore, the order of the image of pi(g) in Q(Vi) / {±1} divides 
2£, lcm(2, (£ - l)/2) or lcm(2, (£ + l)/2). The order e g/ of Pl {g) thus divides 4£, lcm(A,£ - 1) or 
lcm(4,^ + 1). 

Since m g divides e g / and is not divisible by £, we deduce that m g divides lcm(4, £ — 1) or 
lcm(4, £+ 1) for all sufficiently large primes £. Using Dirichlet's theorem on arithmetic progressions, 
we can then deduce from this that m g divides 12. □ 

7. Proof of Theorems 1.1, 1.3 and 1.4 

Fix a prime £ > 11. Let T and T2 be inertia subgroups of Galjj corresponding to the primes £ 
and 2, respectively. 
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Let pi : Galqi — > O(V^) be the representation of §1.2; its image is contained in Vt(Vi) by Lemma 5.2. 
Let i?£ and i?^ be the homomorphisms GalQ — > PSL2(F^) from §5.2 chosen so that they satisfy the 
conclusion of Lemma 5.4. 

We shall prove that $£ is surjective. To do this, we first describe the maximal subgroups of 
PSL2(F^). The description of subgroups of GL2(F^) from §2.4 and §2.6 of [Ser72] shows that if M 
is a maximal subgroup of PSL2(F^), then one of the following holds: 

• M is a Borel subgroup, 

• M is the normalizer of a Cartan subgroup, 

• M is isomorphic to 2I4, 64 or 2I5. 

A Borel subgroup of PSL2(F£) is a group whose inverse image in SL2(F£) is conjugate to the 
subgroup of upper triangular matrices. 

A Cartan subgroup C of PSL2(F£) is a maximal cyclic subgroup whose order is relatively prime 
to i. The group C is cyclic of order {I — l)/2 or (I + l)/2; we say that C is split or non-split, 
respectively. Let N be the normalizer of C in PSL2(F£). The group C has index 2 in N and one 
can show that tr(A) = for all A G N - C. 

7.1. Borel case. Assume that ^(Galq)) is contained in a Borel subgroup B of PSL2(F^). Let B be 
the inverse image of B under the quotient homomorphism SL2(F^) — > PSL2(F^). There is a non-zero 
vector v G F| such that the subspace F^ • v is stable under the action of B. Let ip: B — > Ff be the 
homomorphism such that Av = ip(A)v for all A G B; it gives rise to a character Tp: B — >• F*/{±1}. 
Let a: ( !aP — > F^ /{±1} be the character Tp o 

Lemma 7.1. For eac/i ex G GaWj), there is a root a G F^ 0/ det(J — p^{a)T) whose image in 
F £ x /{±1} is a{a). 

Proof. Choose a matrix A G SL2(F^) whose image in PSL2(F£) is ^(<r). By Lemma 5.4, after 
possibly replacing A by —A, we have det(J — pi(o)T) = (1 — tr(^4)T + T 2 ) 2 . Since A belong to 
B, ip(A) is a root of det(7 - pi(a)T) = (1 - ti(A)T + T 2 ) 2 . So ip(A) G F^ x is a representative of 
ip("&£(a)) = a(a) and a root of det(I — pi(a)T). □ 

Lemma 7.2. There is an integer e G { — 1, 0, 1} such that the character 7: Galjj — > /{±1} given 
by a 1— > a(cr) • x^(°")~ e * s unramified at all odd primes. 

Proof. Fix a t G I whose image topologically generates If. By Lemma 7.1, there is a representative 
a G F^ of a(r) which is a root of det(I — pi(r)T). So there is a one-dimensional subspace W of Vi 
which is stable under the action of I, and r acts on W as multiplication by a. By Lemma 4.5(h), 
a = Xt{ T Y f° r some e G { — 1,0, 1}. Define the character 7: GalQ — > F^/{±1} by a 1— > a(a)xe(o~)~ e ■ 
We have 7(1") = 1, so 7(X) = 7(X^) = 1. Therefore, 7 is unramified at The character 7 is 
unramified at the primes p\2£ since pi and are unramified at such primes. □ 

Lemma 7.3. For each prime p \ 2£, we have Pp 4l \ep' ie ) = (mod £) for some e G {±1} and 
eG{0,l}. 

Proof. Take e and 7 as in Lemma 7.2. Since the image of 7 lies in an abelian group, we find that 
7(2^) does not depend on the choice of I2. We claim that 7^2) = 7(GalQ). If 7(2^2) is a proper 
subgroup of 7(Gal{j), then it gives rise to a non-trivial extension of Q that is unramified at all 
primes. The claim follows since Q has no such extension. 

The group (F^) 2 /{±1} is cyclic, so 7(Gal(Q)) = 7(^2) is cyclic of some order m. Proposition 6.1 
implies that m divides 12. We claim that the cardinality of 7(GalQ) divides 4. If 3 divides |7(Gal<Q))|, 
then 7 gives rise to a cubic abelian extension of Q that is unramified outside of 2. However, by class 
field theory no such cubic extensions exist, so the claim follows. 
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Take any a G Gal<Q>. We have 7 4 = 1, so Xt{ a ) ie ls a representative of a(cr) 4 = a(cr 4 ). By 
Lemma 7.1, ex^ ") 46 is a ro °t °f det(J — pe(a) T) for some e G {±1}- Since pt(o~) G SO(V^) by 
Lemma 2.2, we find that Xt{o~)~ ie is also a root of det(7 — pf(o") 4 T). 

Now take any prime p { 21. We have ^(Frohp) = p (mod £) and det(I — pi{Fiohp) A T) = Pp (T) 
(mod ^). Therefore, Pp 4 ^(ep 4e ') = (mod £) where e' = \e\. □ 

Using (2.2), we find that P 3 (4) (l) = 2 12 5 2 /3 8 , P 3 (4) (-l) = 2 4 /3 8 , P 3 (4) (3 4 ) = 2 12 3 2 5 2 7 2 , P 3 (4) (-3 4 ) = 
2 4 1601 2 , P 5 (4) (l) = 2 14 3 2 /5 8 , P 5 (4) (-l) = 2 4 23 4 /5 8 , P 5 {4) (5 4 ) = 2 14 3 2 5 2 7 2 29 2 and P 5 (4) (-5 4 ) = 
2 4 97 2 1009 2 . By Lemma 7.3 with p G {3,5} and our ongoing assumption £ > 11, we obtain a 
contradiction. 

Therefore, ^(GalQ) is not contained in a Borel subgroup of PSL2(F£). 

7.2. Cartan case. We now suppose that i9^(Gal(Q)) is contained in the normalizer of a Cartan 
subgroup C of PSL 2 (F £ ). 

Lemma 7.4. We have ^(Galqj) C C and the group is either 1 or C . 

Proof. Let N be the normalizer of C in PSL2(F£). By Proposition 4.3(iii), the group pi{X) / peiV) 
is cyclic of order 1, i - 1 or I + 1. If p £ (l)/pi(V) = 1, then = 1 since I \ \N\. 

Now assume that pe(I)/pe('P) is cyclic of order i — 1 or I + 1. The image of pi (I) in £l(Ve)/{±I} 
thus contains a cyclic group of order (£ — l)/2 or (I + l)/2. The group $^(X) is of order 1 or i by 
Lemma 5.4 since X C GalQ(j). Since t \ \N\, we deduce that "&t{T) is a cyclic group containing a 
subgroup of order (£— l)/2 or {(. + l)/2. This implies that $i{Z) is a Cartan subgroup of PSL2(F^). 
The group ./V contains a unique Cartan subgroup, so t^(Z) = C . 

It remains to show that ^(GalQ) C C. Let e: GalQ — > {±1} be the character obtained by 
composing Galjj — > N with the quotient map N — > N/C = {±1}- It thus suffices to show that 
e = 1. 

Suppose p \ 2£ is a prime that satisfies e(Frob p ) = — 1 and hence ^(Frob p ) G N — C . Recall that 
every g G N — C satisfies tr(g) = 0. By Lemmas 5.4 and 5.5, the polynomial det(I — /9^(Frob p )T) = 
P P {T) (mod I) is either (1 + T 2 ) 2 or 1 - 2T 2 + T 4 = (1 - T 2 ) 2 . Using the values of P 3 (T) and P 5 (T) 
from Lemma 2.4, this shows that e(Frob3) = 1 and ^(Frobs) = 1. 

The character e is unramified at p \ 21 since pi is unramified at such primes. The character e is 
also unramified at I since fiiiX) C C. Let K be the fixed field in Q of ker(e). The extension K/Q 
is unramified at all odd primes and has degree at most 2, so K is Q, Q(i), Q(\/2) or Q(y/— 2). The 
primes 3 and 5 split in K, which rules out Q(i), Q(\/2) and Q(y/—2). Therefore, K = Q and hence 
e = 1. □ 

A split Cartan subgroup of PSL2(F^) lies in a Borel subgroup. So by the case considered in §7.1 
and Lemma 7.4, we deduce that C is non-split. 

Lemma 7.5. The representation $£ is unramified at £. 

Proof. Suppose that $i is ramified at £. By Lemma 7.4, we have $^(Gal<Q)) = = C. So gives 

rise to an abelian extension K/Q of degree (£ + l)/2 that is totally ramified at £. There is thus a 
totally ramified abelian extension K' /<Qi of degree {£+ 1)/2. By local class field theory, Gal(i^'/Q^) 
must be a quotient of = F^ x TL^. However, this is impossible since {£+ l)/2 > 1 is relatively to 
the integers (£ - l)£ e . □ 

Lemma 7.6. For each prime p \ 2£, the polynomial Pp 4 \T) is congruent modulo £ to (1 — T) 4 or 
(1 + T) 4 . 
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Proof. Since the image of i?£ lies in the cyclic group C, we find that 'diiX^ does not depend on the 
choice of Z2. We claim that fiiiX?) = ^(GaiQ). If $1(12) is a proper subgroup of t^(Galq)), then 
it gives rise to a non-trivial extension of Q that is unramified at all primes (this uses Lemma 7.5). 
The claim follows since Q has no such extension. 

The group C is cyclic, so $g(Gal<Q)) = is cyclic of some order m. Proposition 6.1 implies 

that m divides 12. We claim that the cardinality of t?^(GaiQ) divides 4. If 3 divides |^(Gal(Q))|, 
then $£ gives rise to a cubic abelian extension of Q that is unramified outside of 2. However, by 
class field theory no such cubic extension exist, so the claim follows. 

Take any a G Gal Q . We have ^(a 4 ) = t^(cr) 4 = /, so det(/-^(o-) 4 T) is (1 + 2T+T 2 ) 2 = (1+T) 4 

or (1-2T + T 2 ) 2 = (1-T) 4 by Lemma 5.4. The lemma follows since P^(T) = det(/-p^(Frob p ) 4 T) 
(mod £) for every prime p\1£. □ 

From (2.2), we have P 3 (4) (l) = 2 12 5 2 /3 8 and P 3 {4) (-1) = 2 4 /3 8 . Since £ > 11, we have P 3 (4) (l) ^ 

(mod £) and P^\ — 1) ^ (mod £). However, this contradicts Lemma 7.6 with p = 3. Therefore, 
$£(Gal(Q)) is not contained in the normalizer of a Cartan subgroup of PSL2(F^). 

7.3. Exceptional case. Assume that ^(Galnj) is contained in a subgroup M of PSL2(F^) that is 
isomorphic to 2I4, 64 or 2I5. As observed in [Ser72, §2.6], for every g E M, u := tr(g) 2 £ F? is an 
element of {0, 1, 2, 4} or satisfies u 2 — 3u+ 1 = 0. For each prime p \ 21, define u p := tr(^(Frob p )) 2 G 
Fi. We thus have u p £ {0, 1, 2, 4} or u 2 - 3u p + 1 = 0. 

By Lemmas 2.4 and 5.4, we have u 3 = 16/9. So u 3 = 2 4 /3 2 , u 3 - 1 = 7/3 2 , u 3 - 2 = -2/3 2 , 
u 3 - 4 = -2 2 5/3 2 and n| - 3u 3 + 1 = -5 • 19/3 4 . Since £ > 11, the prime £ must be 19. 

By Lemmas 2.4 and 5.5, we have u 5 = 4/25. So u 5 = 2 2 /5 2 , u 5 -l = -3-7/5 2 , n 5 -2 = -2-23/5 2 , 
ti5 — 4 = — 2 5 3/5 2 and n 2 — 3ns + 1 = 11 • 31/5 4 . However, since £ = 19, this contradicts that 
u 5 £ {0, 1, 2, 4} or u\ - 3u 5 + 1 = 0. 

Therefore, ^(GaiQ) is not contained in a subgroup of PSL2(F^) which is isomorphic to 2I4, 64 
or 2l 5 . 

7.4. Proof of Theorem 1.3. Fix a prime £ > 11. Since $^(GaiQ) is a quotient of ^(Galjj), it thus 
suffices to prove that ^(Galnj) = PSL2(F^). 

Lemma 7.7. The representation G&Iq — > PSL2(F£) is surjective. 

Proof. If is not surjective, then its image lies in a maximal subgroup M of PSL2(F^). From §§7.1- 
7.3, we find that M is not a Borel subgroup, not the normalizer of a Cartan subgroup, and not 
isomorphic to 2I4, ©4 and 2I5. This contradicts the classification of maximal subgroups of PSL2(F^) 
described at the beginning of §7. Therefore, i?£ is surjective. □ 

7.5. Proof of Theorem 1.1. The theorem is an immediate consequence of Theorem 1.3 for primes 
p > 11. The groups PSL2(Fs) and PSL2(Fy) are both known to occur as the Galois group of an 
extension of Q; for example, this follows from the results of Shih mentioned in the introduction (or 
more concretely one can just write down polynomials with these Galois groups). 

Remark 7.8. We can actually show that for each prime £ > 5, there is a Galois extension K/Q 
which is unramified away from 2 and £ such that G&l(K/Q) — PSL2(F^). For £ > 11, this is clear 
from Theorem 1.3 since pi is unramified away from 2 and £. One can show that the polynomial 
x 5 + 20x — 16 has discriminant 2 16 5 6 and Galois group isomorphic to PSL2(Fs). One can show that 
the polynomial x 7 — 7x 5 — lAx 4 — 7x 3 — 7x + 2 has discriminant 2 20 7 8 and Galois group isomorphic 
to PSL 2 (F 7 ). 

7.6. Proof of Theorem 1.4. Theorem 1.4 is an easy consequence of Theorem 1.3 and Lemma 2.6. 
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8. The image of pg 

Let Tig be the subgroup of SL^F^) consisting of the matrices ^) with A G SL2(F^). Let Qg 
be the subgroup of SL^F^) generated by TLg and the matrix 7 := ( < j~J)- We have j 2 = —I and 
TLg commutes with 7, so TLg is a normal subgroup of Qg with index 2. 

The following describes the groups pg(Galiq) and ^(GaWj)) up to conjugation in Autf £ (V^). 

Theorem 8.1. Take any prime £ > 11. There is a representation qi: GalQ — > GL^F^) isomorphic 
to pi such that ^(GaWj)) = Tit o-nd ^(Gahj) = Ge- 

Theorem 8.1 is of course a generalization of Theorem 1.3; note that Ge/(l) — PSL2(F^). 

8.1. Proof of Theorem 8.1. Fix a prime t > 11 and define Vg := F| © F< F|. Let 

pt: Gal Q -> SL 2 (F^) © SL 2 (F £ ) C Aut Fi (V/) 

and fig,^: GalQ — > PSL2(F^) be the representations of §5.2. We choose fig and ^ so that they 
satisfy the conditions of Lemma 5.4. 

Lemma 8.2. The group ^(GaiQ^)), and hence also jog(GaWj)), is isomorphic to SL2(F^). 

Proof. Let be an irreducible F^[GaWj)]-submodule of Vg. If has dimension 1 over Wg, then 
Proposition 3.1(h) tells us that p^(GaWj)) is a solvable group. This is impossible since the non- 
abelian simple group PSL2(F^) is a quotient of p^(GalQ), and hence also of /^(GaWj)), by Theo- 
rem 1.3. By Proposition 3.1, we deduce that W has dimension 2 over F^ and that Vg and W © W 
are isomorphic F^ [GalQ(j)]-modules. Let /?: GaWj) — > AutY e (W) = GL2(F^) be the representa- 
tion describing the Galois action on W. It thus suffices to show that /3(GalQ(j)) = SL2(F^) since 
/^(GaWj)) = /3£(GalQ(j)) and since pg and pg are isomorphic. 

We have /^(GalQ^) C SL2(F^) by Lemma 4.6. The group PSL2(F^) is a quotient of ^(Galjj^)) 
and hence is also a quotient of /3(GalQ(j)). So /3(GalQ(j)) is a subgroup of SL2(F^) that has a quotient 
isomorphic PSL2(F^). Since SL2(Ff) is perfect (and in particular has no subgroups of index 2), we 
deduce that /3(GalQ(j)) = SL2(F^). □ 

Lemma 8.3. We have ^(GalQ(j)) = 1. 

Proof. By Lemma 5.4 and our choice of fig, the group ^(GalQ(j)) has order 1 or i. Since ^(GaiQ^)) 
is a quotient of the perfect group /^(GaiQ^)) = SL2(F^) by Lemma 8.2, we deduce that has 
^(Gal Q(i) ) = 1. □ 

Lemma 8.3 implies that p^(GalQ(j)) is a subgroup of SL2(F^) © (±-0 = SL2(F^) © (/). So from 
Lemma 8.2, we deduce that 

(8.1) p,(GalQ W ) = SL 2 (F,)©</>. 

Lemma 8.4. There is a matrix B 6 SL2(F^) such that B 2 = —I and ^(Galqi) is generated by the 
image of B in PSL2(F^). 

Proof. By Lemma 8.3, there is a matrix B € SL2(F^) such that the image B of B in PSL2(F^) 

2 

generates ?!^(GaiQ) and B = —I. We have 'dg(o-) = B for all a E GalQ — GaWj) . The proof of 

Lemma 5.5 shows that the eigenvalues of B are primitive 4-th roots of unity, so B 2 = —I. □ 

By Lemma 8.4, the group t^(GalQ) is generated by the image in PSL2(F£/) of some matrix 
B G SL 2 (F £ ) that satisfies B 2 = -I. So there is an inclusion pg(G&\<q) C SL2(F^) © (B). This 
inclusion with (8.1) proves that 

(8.2) p / (GaJ Q ) = SL 2 (F / )®(B). 
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After conjugating pg by an element of (J) ® GL2(F^), we may assume that B = (® q 1 ). 
Let e± and e2 be the standard basis of F|. Define 

g t : Gal Q ^ GU(¥ e ) 

to be the representation obtained from pi by using the basis (3 := {e\ <S> e\, ei ® e±, e± (g) e2, e2 ® 62} 
of Vi- Using (8.1), we find that ^(Galq^)) = Hp. With respect to the basis /3, I®B acts on Vi via 
the matrix 7. So ^(Galnj) is generated by Tie and 7, and hence equals Qg_. 

8.2. Modularity. Fix a prime £ > 11 and take ^ as in Theorem 8.1. Define the ring O := Z[z]. 
We view F| as an O-module by letting i act as 7 (note that 7 2 = — J). This action turns F| into 
an O/^O-module that is free of rank 2. Let {ei, e^i e 3) e i} be the standard basis of F|. One can 
verify that /J := {e±, 62} is a basis of F| as an O/^O-module. Using the basis /3, we can write qi as 
a representation 

<pt: Gal Q ^GL 2 (0/£0). 
By Theorem 8.1, we find that (^(GaiQ^)) = SL2(F^) and that ^(Galqj) is generated by SL2(F^) 
and the scalar matrix il where i is the image of i in O/IO. 

Let A be a prime ideal of O lying over i and set F\ = O/X. Composing <pi with the reduction 
modulo A map gives a representation 

<-P\ '■ Gal Q -> GL 2 (F A ). 

We have ^(GaW^) = SL2(F^) and the group ^(GalQ) is generated by SL2(F^) and the scalar 
matrix il where i is the image of i in F\. Note that the group (fx (Galjj)/ (il) is isomorphic to 
PSL 2 (F,). 

The representation tp\ is absolutely irreducible since ^(GaWj)) = SL2(F^). For all a S Galjj — GaiQ(j), 

_2 

we have det(ip\(a)) = i = —1. In particular, det ((f\(c)) = — 1 f° r an Y c G GalQ that arises from 
complex conjugation under some embedding Q ^ C. By Serre's modularity theorem [Ser87], which 
was proved by Khare and Wintenberger [KW09], we find that the representation ip\ arises from a 
cuspidal eigenform /. 

We shall not describe / here (it can be chosen to have weight 3 and independent of A and £ > 11). 
Motivated by this paper, we will discuss in future work how to obtain other PSL 2 (F£) extensions of 
Q using suitable eigenforms. 

Appendix A. Proof of Lemmas from §2 
Fix an odd prime £. For background on etale cohomology, see [Mil80]. 

A.l. Galois representations. For each positive integer n, let E[£ n ] be the ^"-torsion subscheme 
of E; it is a sheaf of Z/£ n Z-modules on U which is free of rank 2. The sheaves {^[^"JlnM with the 
multiplication by £ morphisms £'[£ n+1 ] — > E[£ n ] form a sheaf of Z^-modules on U which we denote 
hy T e (E). 

Let r\ be the generic point of U. Set K = Q(i). Fix an algebraic closure K of Q(t) containing K 
and let r) be the corresponding geometric generic point of U. The sheaf E[£ n ] on U corresponds to 
a representation 

fan : m(U,fj) -> kut %/t n Z (E[l n } n ) GL 2 (Z/rZ). 

Let E v be fiber of E — > U above 77; it is the elliptic curve over Q(t) defined by (1.1). We can identify 
the stalk E[£ n ]fj with the group of ^"-torsion points in E^K). The representation fan\ ni ^j ^ 

extends to a representation fan : G&l(K / K) — > GL2(Z/£ n Z). 
Lemma A.l. For all n > 1, we have fan (tti(Uq, rj)) = SL2(Z/^ n Z). 
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Proof. It suffices to show that Pt*(Gal(K / K)) = SL 2 {Z/£ n Z). This follows from Proposition 2.1 of 
[CP84] and requires that £ is odd; note that the j-invariant of E v /Q(t) is 256(t 4 - t 2 + l) 3 t~ 4 (t - 
l) -2 (i + l) -2 and hence the least common multiple of the order of its poles is 4. □ 

Lemma A. 2. For all n > 1 and i / 1, we have H l c (U^ E[£ n ]) = 0. 

Proof. The lemma holds for i > 3 since U has dimension 1. The lemma holds for % = since f/ 
is an affine curve. We may now assume that i = 2. By Poincare duality, it suffices to show that 
H9 t (Uq, E[£ n ] v (1)) = 0. The Weil pairing shows that E[£ n ] v (l) and E[£ n ] are isomorphic, so we 

need only show that Hg(U^, E[£ n ]) = 0. We have (Uq, E[£ n }) = E[£ n ]^ l{m which is by 
Lemma A.l. □ 

Let j : U Pq be the inclusion morphism. 
Lemma A. 3. 

(i) For n > 1, we have j\{E[£ n \) = j*(E[£ n }). We have j\{T e (E)) = j*(T e (E)). 

(ii) The Fi-vector space Ve has dimension 4. 

Proof. Take any closed point x of and let I x be a corresponding inertia subgroup of Gal(K /K). 

The stalk j*(E[£ n ]) x is isomorphic to E[£ n ]^ x . If E n has good, multiplicative or additive reduction 
at x, then the Z/£ n Z-module j*{JF) x is free of rank 2, 1 or 0, respectively. The elliptic curve E v 
has good reduction at the points of Uq- and additive reduction at the closed points of PL — Uq 

(moreover, it has reduction of Kodaira type 7| or 1\ at 0, 1, —1 and oo). So j*(E[£ n ]) vanishes on 
P 1 - - and thus j\(E[£ n ]) = j*(E[£ n ]). This implies that j\{T t (E)) = j„(T e (E)) which completes 

the proof of (i). 

Now restrict to the case n = 1. Define \ ■= EiC" 1 )* dim Ff H L( ¥ ^j*( E i^))- B Y [Mil80, V The- 
orem 2.12], we have 

X = (2 - 2 • 0) • 2 - V c x 

* — 'a; 

where the sum is over the closed points x of P 1 ^ and c x is the exponent of the conductor of j*(E[£]) 

at x. The integer c x can be computed using Tate's algorithm [Tat 75]. Since our fields have char- 
acteristic 0, we have c x = 2 — d x where d x is the dimension over of the stalk of j*(E[£\) at x. 
Therefore, c x = if x belongs to Uq and c x = 2 otherwise. Therefore, \ = 4 — 4 • 2 = —4. 
By part (i) and Lemma A. 2, we have 



X 



^(-l) 4 dim F , Hl(U®, E[£}) = - dim Ff , E[£\) = - dim F , V e . 



Therefore, dimp £ Vi = —\ = 4, which proves (ii). □ 
Define the Z^-module M% := H^(Uq,T£(E)) and let 

p £ oo : GalQ -4 Aut Z£ (M e ) 
be the representation describing the natural Galois action on M^. 

Lemma A. 4. 

(i) The Zg-module Mi is free of rank 4. 

(ii) The homomorphism M# — >■ Vi induced by the morphism Tg(E) —> E[£] gives an isomorphism 
between Mi/£Mi and Vi that respects the GalQ- actions. 
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Proof. The short exact sequence -> T t (E) ^ T e (E) ^ E[£]^0o( sheaves on U gives rise to an 
exact sequence 

H° c (Uq,E[£]) -^M^Mh^H H 2 c {U^T t {E)). 
We have H°(Uq, E[t}) = and H 2 (Uq, T e (E)) = ^ # 2 (C/q, ^[f 1 ]) = by Lemma A.2. The short 

X £ 

exact sequence ^ Mg, Mi -)• ->• then gives the desired isomorphism of part (ii). Since 
multiplication by ^ on Mi is injective, we deduce that the Z^-module Mi is free. The rank of Mi is 
then equal to the dimension of Mi/lMi = Vi, which is 4 by Lemma A. 3. □ 

Define the ring R = Z[l/2, l/£] and the i?-scheme 

U := h} R - {0,1,-1} = SpecR[t, (t(t - l)(t + l)) -1 ]. 

The equation (1.1) defines a relative elliptic curve £ U. For each positive integer n, let £[£ n ] 
be the ^"-torsion subscheme of £; it is a sheaf of Z/^ n Z-modules on IA which is free of rank 2. 
The sheaves {£[^ n ]} n >i with the multiplication by £ morphisms £[£ n+1 ] — > £[£ n ] form a sheaf of 
Z^-modules on IA which we denote by Ti{£). 

Let y.lA )■ Pjj be the inclusion morphism and let ir: — > Spec it! be the structure map. 
Define the sheaf T := R 1 ir*(j*(Ti (£))) on Spec it! of Z^-modules. Using [73, XVI Corollaire 2.2], 
we find that the sheaf T on Spec R is a lisse sheaf of Z^-modules. The sheaf T thus corresponds 
to a representation gi°o : 7Ti (Spec R, £ ) — >■ Aut^(J^) where £ is the geometric point of Speci? 

corresponding to a fixed algebraic closure Q. 

Base extension gives a morphism £q — > Uq that agrees with our earlier morphism f:E—>U. 
The restriction of Tg(£) to U = IAq is our sheaf Ti(E). Therefore, J 7 ^ = i?| t (PL., j*(Tj>(£))) = 

i?3- t (P-L, j*(Ti(E))) which is H^.(Uq,Ti(E)) = Mi by Lemma A.3(i). So we can view Q£oc as a 
morphism 

Qloc : 7Ti(Speci?,f) ->■ Aut Z£ (Mf); 

it gives rise to a representation GalQ — > Autz e (Mi) that agrees with pi^o up to conjugacy. In par- 
ticular, pioo is unramified at every prime p \ 2£. 

We now fix a prime p \ 11. Let s be the closed point of Spec R corresponding to the prime p and 
let s be the geometric point arising from a fixed algebraic closure ¥ p . 

Base extending by s, we obtain a relative elliptic curve £^ — > Uv ='■ IA P . The fiber of £f — > U p 
over the generic point of U p is the elliptic curve E p /F p (t) of §2.3. For each integer n > 1, let ^F p [^ n ] 
be the ^"'-torsion subscheme of £f p ; it is a sheaf of Z/^Z- modules on U p which is free of rank 2. 
The sheaves {<?F p [^ n ]}n>i with the multiplication by £ morphisms <?u' p [£ n+1 ] — > £w p [£] form a sheaf 
of Z^-modules on lA p which we denote by Ti(£f p ). The sheaf Ti(£f p ) is of course the restriction of 
Ti{£) to Up. 

Take any closed point x of U p and let x be a geometric point extending x. Denote the stalk 
of Tt(£j ) at x by Ti(£ ¥p ) x ; it is a free Z^-module of rank 2. The geometric Frobenius F x acts 
Z^-linearly on the fiber Tg(£^ p )x- Let Frob^ := i 7 " 1 be the arithmetic Frobenius. One can show 
that det(I - Fiob x T de s x \T e (£ ¥p ) s ) equals L X (T) := 1 - a x T de ^ x + p dc ^ x T 2dc ^ x with notation as in 
§2.3. Therefore, det(J - F x T de s x \Ti(£ Vp ) s ) equals 

det(F x )r 2dc ^det(/ -Frob x T- dc ^\Ti(£ Fp ) x ) = p- d ^ x T 2d ^ x L x {T~ l ) = L x (T/p). 

Therefore, L(T/p,E p ) = \[ x L x (T/p) = \{ x det{I - F x T dc ^ x \Ti(£ ¥p ) x )- 1 where the product is over 
the closed points oiU p . By the Grothendieck-Lefschetz trace formula, we have 

L{T/p,E p ) = -¥rob p x T\Hi{U p>% ,Ti{£ ¥p )) ® z , Q,) ( " 1)l+ \ 
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The morphism j gives an inclusion morphism U p Pjp that we also denote by j. Since E p /¥ p (t) 
has additive reduction at 0, 1, —1 and oo, we have j\{Ti{£^ v )) = j*{Ti(£ ¥p )). Therefore, 

L(T/p, E p ) = JJ. det(J - Frob" 1 T\ Hi^, j,(2i(£ F ,))) ®z e Qe) { ' iy+1 ■ 

Lemma A. 5. We have L(T/p,E p ) = det(J - ^(Frob" 1 )! 7 ). 

Proof. Take any integer i and define the sheaf Q = R?"7r*(jz(Te(£)) on Speci? (we have T = Q when 
i = 1). Using [73, XVI Corollaire 2.2], we find that the sheaf Q on Speci? is a lisse sheaf of Z^- 
modules (and so is constructible and locally constant). The stalk of Q at s is 77J t (Pjjr ,j*(T/>(£)) = 

Hl t (¥l p ,UT e (£ ¥p )). The stalk of G at £ is tfj t (P^, j,(T t (£))) = H^, j*(T e (E))). " 

If i ^ 1, then we have = by Lemma A. 2, and hence i?J t (Pp , j*(T^(f]p p )) = since £/ is 
locally constant. Therefore, 

L(T/p,E p ) = det(J - Frob; 1 T| frJtOPj p , J.(2i(£ Fp ))) ® z< Q £ ) = det(I - Frob; 1 T\ F- s ®^ Q e ) 

Since J- is locally compatible and constructible, each cospecialization map J-g — > J-^ is an iso- 
morphism of Z^-modules. The isomorphism coming from the cospecialization map has a com- 
patible Galois action, i.e., there is a Frobenius automorphism Frob p G GalQ such that the ac- 
tion of Frobp on J 7 ? corresponds with the action of Frob p £ Gal(F p /F p ) on In particular, 
det(J - Frob~ 1 T\Fg ® Zt Q e ) = det(7 - Frobp 1 T|.Fg ® Ze Q e ). Therefore, L(T/p) agrees with 
det(I - Frob; 1 T\JF^ ® e ) = det(J - p^(Frob- 1 )T). □ 

Since Mi is a free Z^-module of rank 4 by Lemma A.4(i), Lemma A. 5 implies that L(T,E p ) is a 
polynomial of degree 4; that it is has integer coefficients and is independent of £ is clear from the 
series definition of L(T,E p ). Define P P (T) := L(T/p, E p ). 

Lemma A. 6. The series P p {T) is a polynomial of degree 4 with coefficients in Z[l/p]. □ 

Lemma A. 7. For each prime p \ 2£, the representation pi is unramified at p and satisfies det(7 — 
MFrob; 1 )! 1 ) = P p (T) (modi). 

Proof. This follows immediately from Lemmas A. 5 and A. 4. □ 

A. 2. Proof of Lemma 2.1. Part (i) is Lemma A.3(ii). We now prove (ii). The Weil pairing 
gives an alternating non-degenerate pairing E[£] x E[£] — > F^(l) of sheaves on U. It extends to an 
alternating non-degenerate pairing 

(A.l) j*(E[£]) x j,{E{£\) -> j;(F,(l)) = F,(l). 

Composing the cup product 

H&FL,ME[e\)) x Hl(FLj^E[£})) ^ F|(P^, j.(E[£\) ® U{E[l])) 

with the homomorphism fl"| t (P^, j*(E[£]) ® j*{E[£])) -> H? t (P^, F^(l)) ^ ¥ £ arising from (A.l), we 
obtain a pairing 

{,):V t xV e ^F e ; 

note that V e = H^FL, j*(E[£]) by Lemma A.3. We have (a(v),a(w)) = a({v,w)) = (v,w) for all 

v,w 6 Vi and a € GalQ. The pairing ( , ) is symmetric; observe that the cup-product and (A.l) 
are both alternating. The pairing ( , ) is also non-degenerate; this follows from Poincare duality, 
cf. [Mil80, V Proposition 2.2(b)]. 
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A 3. Proof of Lemmas 2.2, 2.3 and 2.4. 
Lemma A. 8. 

(i) For each odd prime p, we have T 4 P p (l/T) = e p ■ P p (T) for a unique e p G {±1}- 
(ii) For each odd prime t and prime p\ 21, we have det(p^(Frob p )) = e p . 

Proof. Recall that p^(GalQ) C 0(Vg) by Lemma 2.1 (ii) and dim^ Vi = 4. So for each A G O(V^), 
we have T det(/ — AT -1 ) = det(A) ■ det(J — AT) where det(A) G {±1}- In particular, for each 
prime p \ 2£, we have T 4 det(I - /^(Frob" 1 )T _1 ) = det(^(Frob~ 1 )) • det(7 - p^(Frob~ By 
Lemma A.7, we have T 4 P p (T _1 ) = det{p e (Frobp)" 1 ) • P P (T) (mod I). 

Since T A P p (T~ l ) is congruent to P p (T) or —P p (T) for infinitely many primes £, we have T 4 P p (T) = 
e p P p (T) for a unique e p G {±1}- Reducing modulo £, we find that det(/?£(Frob p )) = e p l = e p . □ 

For each odd prime £, define the character a^: GalQ — > {±1}, a i— > det(pi(a~ 1 )). By Lemma A. 8, 
we have a^(Frobp) = e p for all p \ 2£. By the Chebotarev density theorem, we find that ag is a 
character a: GalQ — > {±1} that does not depend on I. Since a = ag is unramified at p \ 21 for all 
odd ^, we deduce that a is unramified at all odd p. Let K be the fixed field of ker(a) in Q; it is 
unramified at odd primes and satisfies [K : Q] < 2. So if is Q, Q(i), Q(y/2) and Q(V^2). 

By Lemma A. 6, P p {T) is a polynomial of degree 4. So to prove Lemma 2.2 and 2.3, it suffices to 
show that a = 1. If a / 1, then K ^ Q and hence 3 or 5 is inert in If G {Q(i), Q(\/2), Q(v /Z 2)}. 
So if a 1, then £3 = a(Frob3) or £5 = a(Frobs) is —1. Therefore, Lemmas 2.2 and 2.3 will follow 
from Lemma 2.4. 

We now sketch Lemma 2.4. Computing the product (2.1) with the closed points x with degx < 2, 
we find that L{T,E 3 ) = 1 - 2T 2 + 0(T 3 ) and L(T,E 5 ) = 1 - 4T + 54T 2 + 0(T 3 ). Therefore, 
P 3 (T) = 1 - 2/9 • T 2 + 0(T 3 ) and P 5 (T) = 1 - 4/5 • T + 54/25 • T 2 + 0(T 3 ). Since the coefficients 
of T 2 in i"3(T) and P§{T) are non-zero, we have £3 = £5 = 1 and hence the polynomials Ps(T) and 
P 5 (T) are reciprocal of degree 4. Therefore, P 3 (T) = 1 - 2/9 • T 2 + T 4 and P 5 (T) = 1 - 4/5 • T + 
54/25 • T 2 - 4/5 • T 3 + T 4 = (1 - 2/5 • T + T 2 ) 2 . We have also verified these examples with Magma's 
function LFunction [BCP97]. 

A. 4. Proof of Lemma 2.5. Take any prime p \ 2t. By Lemma A.7, pe is unramified at p and 
det(I - pe(Frob~ X )T) = P P (T) (mod £). We have det(J - A~ l T) = det(/ - A) for all ^ G SO(T^). 
So by Lemma 2.2, we have det(7 - ^(Frob p )T) = det(7 - p t {Ftoh~ l )T) = P P (T) (mod i). 

A. 5. Proof of Lemma 2.6. Let NS(X) be the Neron-Severi group of Xq. Let T be the subgroup 

of NS(X) generated by a section of /, a non-singular fiber of / over a rational point of Pq, and the 

irreducible components of the singular fibers of /. There is a natural Galqraction on NS(AT) that 
preserves T ■ 

Lemma A. 9. 

(i) The group T is free abelian of rank 30. 
(ii) The group GalQ acts trivially on T ■ 

Proof. The singular fibers of /: X — > Pq are at 0, 1, —1 and 00. Fix s G {0, 1, — l,oo}, and let T s 

be the set of irreducible components (defined over Q) of the fiber f~ 1 (s) of / over s. There is a 
natural action of GalQ on I s ; to prove (ii) it suffices to show that this action is trivial. 

By Tate's algorithm, the fiber / _1 (s) of / at s is of Kodaira type I| if s G {0, 00} and of Kodaira 
type I2 if s G {1,-1}. The Dykin diagram corresponding to the intersection matrix of I s is of type 
Dq or L>8 . We find that GalQ acts trivially on I s if and only if GalQ acts trivially on the 4 elements 
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of I s that occur with multiplicity 1 in /~ 1 (s). Using Tate's algorithm, one can show that the four 
irreducible components of / -1 (s) with multiplicity 1 are all defined over Q. 

Part (i) follows from equation (1.3) of [Shi92]. □ 

Let 7: NS(X) — > H^XqjQ^I)) be the cycle map; it is a homomorphism that respects the 
natural GaiQ-actions. As explained in §1 of [Shi92], there is a Q^GalqiJ-submodule Vi such that 

(A.2) (Ml)) = V e © ( 7 (T) ® Zi Q e ) 2* V e © Qf; 

the last isomorphism uses Lemma A. 9. By Proposition 1 of [Shi92], the vector space Vi has dimension 
4 over Q^. 

Lemma A. 10. The TLi-module H 2 t {X^Tji) is /ree. 

Proof. By choosing an embedding Q C and using the comparison isomorphism, we need only 
show that H 2 (X(C),Z e ) = H 2 (X(C),Z) © z Z e is a free Z r module. By applying Corollary 1.48 of 
[CZ79] to the elliptic fibration X(C) -»• P^C) arising from /, we find that H 2 (X(C),Z) is a free 
abelian group. □ 

By Lemma A. 10, the Z^-module H? t (Xq, Zf(l)) is free. So from (A.2), we deduce that the semi- 
simplification of H? t (X-Q, F^(l)) as an F^fGaljj] is isomorphic to V£©F|° where Vi has dimension 4 
over F^. The lemma is then a consequence of the following. 

Lemma A. 11. The F^[GalQ] -modules Vn and Vi are isomorphic. 

Proof. Using Lemma 2.4, we have det(I — pi(Frob^)) = 1 — 2/9 ■ T 2 + T 4 (mod I). The discriminant 
of 1 - 2/9 • T 2 + T 4 is 2 16 5 2 /3 8 . Since t > 7, the polynomial 1 - 2/9 • T 2 + T 4 G ¥ e [T\ is separable 
and 1 is not a root. Therefore, Vi is a semi-simple F^[Gal(Q)]-module and V^ Gal ° = 0. Since also 
dim^ Vi = 4, to prove the lemma we need only show that Vi is the quotient of some F^[Gal(Q)]- 
submodule of H^(X^,¥ e (l)). 

Consider the Leray spectral sequence with ^-terms E^ q = H? t (P^, R q f*F ^(l)) which converges 
to L n = H? t (X^W t {\)). Let Eg? be the limiting value of the {E?' q } r . There is thus a filtration 
C Wi C W 2 C L 2 = Hl(X^, F £ (l)) of F4Gal Q ]-modules such that W 2 /Wi is isomorphic to 
Using that Ef' 9 = for p > 2, we find that E X J equals E\ X = H^FL, i? 1 /*F«(l)). So we need 
only show that the F £ [Gal Q ] -modules V* and iZ£.(Pjp JlV.F^l)) are isomorphic. In particular, it 
suffices to show that the sheaves j\(E[£]) and .R^F^l) of F^-modules on Pq are isomorphic. 

Take any geometric point s of Pq — f7. The stalk of i? 1 /*F^(l) at s is i?J t (X s ,F^(l)) where X s is 
the fiber of / above s. The fiber A s is simply connected (it has Kodaira type J| or ^4) an d hence 
the stalk of i? 1 /„,Ff(l) at s vanishes. 

It thus suffices to show that E[£] and i^F^l) = JR 1 /*F^(1)| U are isomorphic sheaves of F^- 
modules on U. Since these sheaves are both locally constant and constructible, it suffices to prove 
that E[£]fj and (R 1 f*F e (l))f] = H} t (Efj,¥ e (l)) are isomorphic F £ [Gal(Q(t)/Q(t))]-modules. Indeed, 
if £ is an elliptic curve over any field k of characteristic 0, then the group of ^-torsion points in £ (k) 
is isomorphic as an F^[Gal(/c/£;)]-modules with iT| t (£r, F^(l)). □ 
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